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IN THE UNITED STATES PATENT AND TRADEMARK OFFECE 

In re apglicgiiofn of: TOSm^iX Gilg. ©rb;Ui)^:10mt; 2136; 
S^mi: li)M%fm Exanffito:? ^Slftaiitd^Jb^ 

Tor. mmy^mcj^m: trnmcE "wmiv^Am/iMtY'm 

ENtR^PTION/DEdRYPTiON LOGIC 

MS Amendment 
eommissioner for Patents 
P.O. Box 1450 
Alexandria, VA 223134450 

DECLARATION UNDEft 37 gp.lt 61.131 
Th<>inas-J/Gi^ai»a-^^ teiigSvw^ doJiereby staetto 

1. We are jcfkit: ihyeiitors- of dafins 9-16 arid 20-25 of the patent 
applicatioii identi^ed above and the invei]iors of tte^subject mcitter destGiibed and, 
daimed therein. 

2. Prior t© Oc^obiKr 17^ 200% we cGriceiyed^df 2ttid redu<^ to psractice flie 
iriveiitipn d^crib^ and iMiaiid ih the- siibjisctq^at^t a^^^ tfai^ cdimtry. 
EkhWii J^ attached hereto, eiidertc^ oqr coiripletioli of the daimed uiveittiori jpirior te 

3. The aiiached Exhibit A is invention disblosuire ii^ormation that we 
generated to document our invention prior to Oiolober 17, 2003. 

By signing below, we declare that all statemerits rnade herein aire of our own 
loiowledge are tFu0 atid that all statements made on informatiori are believed to be 
true;, arid iiirther that the statements were iiiade ^th the knov^edge dmt willful false 
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Sfeiiai 10/715^724 mSm^ix. aE60S&lB9744 

statements and the like are punishd)le by fine or imprispnmeat, or bdth, under § 1001 
of Title 18 of the United States Code, and that sudi willful false, statements may 
jeopardize the validi^ of the application and or pat^ts issued thereoa 
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EXHIBIT A 




Invent 



PDNo. 
200308974 



Date Received 



CoUecUon 
IPO 



The InfomtaUon contained 'm dooumeni Is HP CONFIDSNTlAt and may not be dSsdpsad to olhoi* wKhoul prtor auOioffzatlon. SUbnA IN$ 
disclosore to the HP Ldqs} Doparlmemt as soon as posGlbto. No patent pratetiloA is pMsftle imta a patent appUcadon Is authoTbed. prepaied, 
and submitted to the Ocvemmeru; 



Title PUeMevel eecurlt/ 



Abetrect We propose e display where eeourity is tmptemettted at the pbcel (or pixel group) 
level rather thtan Ihe whole^lsplay level. 

Security Includes discovery of pixels, access rights to and from pbcels, secure 
oorrtmuntcaflon to and from pixels, and encrypted content flow to and from pixels. 

Implementation includes pixel addressing schemed (programmatic and video file 
fomiats), and the physical implementation of security logic/circuitry next to the 
pixel logtc/drculby. 

Projecia Digital Projectors and New Business Qrea^on 



Problems Solved Physical pixel-level (or pixel group) security solutions 



Display security Is typically Implemented at the whole-drsptay level of abstraction 
in a physically distinct subsystem (e.g. video driver chipset) from the light 
modulation subsystem (e,g. LCD or DIP panels). Between these subsystems Is 
typically a single electrical Interface, often suffldentfy physlcaliy accessible to 
permit someone to '^nlff the bits" flowing over the Interface. 

By moving the level of abstraction to the pixel level, and relocating and 
duplicating security circuitry to each pixel* there Is no longer a single electrlcai 
entff point. 

ProcM^mmatlc plxel*1evel (or pbcel group) security solutions 



No matter the physical Implementation, moving the whole^isplay level of 
abstraction to the pbcel level opens up several novel solutions. 

1} Regions (to pixel or pixel group resolutton) of a single physical display can be 
selectively advertised or seen. 

Exampe - A teacher's presentation PC In a lecture tialt can discover the entire 
display surftu^e In the front of the lecture hall for subsequent use. Student 
presentation PCs In the same lecture hall can only discover a portion of the entire 
screen (the left hand side), to which they might post questions. 

2) Regions (to pixel or pixel group resolutton) of a single physical display can 
Iwe varied read and write permisstons. 

Example - A bill board display In a public campground can have seleol regions 



that can only be wilUen to by the campground malntalners. Other regions woukS 
bewrftableby all. 

3) Regions (to pbcel or pbcet group resolution) of a afngte physical display can 
communicate securely. 

Example - In a narrow casting applloatlon, both a region of the screen and the 
sending appticatlon can negotiate a secure communication channel so that 
Instructions and content sent to the display cannot be sniffed In transit. 

4) Regions (to pixel or pixel group resolution) of a single physical display can 
engage In differing encryption/decryption strategies and keys. 

Example - You wish to download a HoRywood movie In digital form, but Hollywood 
does not want your copy to wortc on anyone else*s display. Therefore, each pixel 
(or pixel group) In your display can generate a unique public encryption key which 
gets communicated to Hollywood, and Hollywood encodes digital video that can 
only be decrypted by the pixels of your display. 

Example 2 - A ntf lltary application of the above. 

Example 3 - Combine Ihls wi^ phy^l plxel-levet security. 



Description For physical, additional circuitry is located next to each pbcel (or pbcel group), and 
this circuitry can be unk|uely addressed. 

For programmatic^ its a matter of software programming. 

Advantages Pixel level security Is harder to snHTi and opens up new dlsplay^lnteractlon 
paradigms. 
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From: GILG,THOMAS J (HP-Corvalll8,ex1 ) tthonnas.gilg@hp.com] 
Sent: 

To: Wendy A. Balabon 

Cc: Michael R. Bascobert; Glenn £. Forbis 

Subject: RE: U.S. Patent Application * Pixel-Level Security"; HP No. 200308974; Our Ret. No.; 65079-0076 
Michael, 

As expected, your write-up is causing me to better 
articulate all the major elements of my disclosure. 

Let me start by saying ttiat I will use the word "picture" 
to Include A) digital still images (e.g. TIP, JPEG) and 
B) digital video Images (e.g. MPEG2, h,261). This 
disclosure applies equally well to both classes of 
pictures. 

There are really two distinct concepts 1 need to call out: 

1) Current picture encryption/decryption techniques are 
applied at the whole picture level. If you have a 5x4 picture, 
a single encryption step will consume all 20 pixels at once, 
without significant regard to their spatial placement, and 
encrypt them into a blob. Once transmitted to the display 
side, a slngleijecrTptiQrrBtep will consume the blob at 
once, and will regenerate the 20 pixels. 

My disclosure is that encryption and decryption activity 
can occur at the pixel level or pixel-region (sub-display) 
level, in addition to the "whole display" level. 

See the attached slide deck and the siidatitled 'Multi-Key 
Concept". 

Some relevant notes on this concept. 

- There are a number of well-known encryption/decryption 
techniques Involving one key or matched public-private keys. 
This disclosure works with all of these encryption/decryption 
techniques. 

- The source and destination devices can either have a fixed 
notion of the encryption/decryption regions, or can exchange 
a trivial descriptor of the encryption/decryption regions. 

In the example with 10 key regions, the descriptor could be: 



1.1/12/1,3/1,4/1,5/2,1/2,2-5:3,2-5/ 
2-3,5; 4,2-5/3.1/4,1 



Coordinates are expressed using "}c,y", ranges of contiguous 
values can be expressed using a 7" delineates the 
coordinates contained in a key region, and a delineates 
the portions of a iiey region. 

- The slide "Muitl-Key Concept 2" shows that not ail displays 
might have access to ail the region keys, therefore Is unable 
to decrypt some regions. 

- While my emphasis has been on the display side, there is 
a con'esponding element on the source side. Pixel level or 
pixel-region level security for display and capture devices, 

2) Current picture encryption/decryption techniques are 
Implemented in circuits that are not close-to or integral-to 
a pixel's immediate circuitry (e,g. LCD. Piasma, not CRT). 
For example, a digital video projector typically has a printed 
circuit card that contains all image processing and decryption 
circuits, and the output (unencrypted pictures!) of such a card 
is typically conveyed to the display circuit via a ribbon cable 
or physical connector, and Is easily tapped Into by hackers. 

My disclosure is that a much more robust and secure system 
is made when the act of decryption is implemented by circuits 
associated with each plxei» or In circuits that drive a small 
region of pixels. For example, each pixel In an LCD display has 
one or more transistors physically associated with It (iess that 1mm 
away) for the sake of sensing the addressing matrix and then driving 
the pixels light state. Emerging manufacturing techniques now make 
it possible to associate more complex circuitry with each pixel, such 
as decryption circuitry. 

Some relevant notes: 

- An extremely secure display could be built by Implementing a 
public/private key generator circuit at the pixel or pixei-regton level. 
The display would release all the public keys so that content authors 
could properly encrypt picture content for the display (using the 
various public keys), but the private keys would never be released by 
the pixel or pixel-region circuits. Literally no one outside of the pixel 
or pixel-region would know how to decrypt incoming pictures. Hacking 
would require complex probing Into each pixel or pixel-region curcuit. 

I will resume my review and commentary on Tuesday morning. 

Thomas Gilg 



